$ rpki-client -vvf rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft File: fd2N3PFW56GBobc5eyTUIJY1Pdg.mft (raw, json) Hash identifier: SBquCnpdIrnVJaA/f6GrHsOFnJVrFfIYELCaUb2Q7Js= Subject key identifier: 98:D6:50:C8:A1:BB:BA:2E:45:4E:3A:43:14:11:7E:57:3D:F1:0A:ED Authority key identifier: 7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 Certificate issuer: /CN=A91A55EC/serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Certificate serial: 0532 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft Manifest number: 0528 Signing time: Thu 23 Jul 2026 00:23:36 +0000 Manifest this update: Thu 23 Jul 2026 00:23:36 +0000 Manifest next update: Thu 30 Jul 2026 00:23:36 +0000 Files and hashes: 1: fd2N3PFW56GBobc5eyTUIJY1Pdg.crl (hash: 7jTUZN/06zv5qjPfgGkmJdmWlpycPrjEPGfidkm+HHw=) 2: 8E15FBF25CFF11ECB5477E0BC4F9AE02.roa (hash: 0Yuj8jwsHlCnMcg0SGtiJaONeRl25wMXy9ufRSKcIXM=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Jul 2026 00:23:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1330 (0x532) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91A55EC, serialNumber=7DDD8DDCF156E7A181A1B7397B24D42096353DD8 Validity Not Before: Jul 23 00:23:36 2026 GMT Not After : Jul 30 00:23:36 2026 GMT Subject: CN=6a615f08-0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ad:94:35:b7:84:c0:3a:19:3c:43:9d:ee:8f: bb:2e:4a:b9:72:a6:65:51:ee:42:73:8e:0d:b3:60: 0e:bd:70:a6:7b:c1:01:9c:1a:82:ad:e5:34:10:1c: c3:2f:c7:4e:0d:3c:6b:f5:e8:f5:3e:d5:97:aa:36: 61:36:8a:e7:98:c6:71:a9:f2:62:6c:0b:66:5a:8e: d6:d5:43:ab:16:a7:11:cf:ff:9c:b1:cf:c7:b5:9d: 2e:57:6a:d8:8d:73:19:74:c8:8b:5e:00:33:f3:ed: 9c:f3:26:1a:15:23:9c:dc:dd:ae:79:a8:2b:5a:f7: 52:21:9f:d4:bf:db:06:e1:66:6d:2d:62:14:13:b9: 9e:95:12:58:6f:22:61:39:3a:59:13:6d:4e:25:54: e8:7c:7f:f2:9f:71:20:14:95:4c:80:34:89:11:61: 9f:0f:7c:c3:b5:4d:eb:39:10:10:eb:fe:e6:15:a5: cb:61:6b:af:f7:51:3a:a3:b0:bb:c0:8b:d2:d0:77: d5:b1:5a:f0:39:73:c1:13:76:ca:a5:b9:b8:45:bb: c4:2c:14:a6:31:ac:d1:72:2c:45:dc:2f:cc:5f:e3: f8:1e:ef:6f:92:24:df:23:0a:71:7a:0c:3f:8c:f4: 56:b0:62:99:cc:9e:ed:4b:18:cd:d1:19:3b:23:63: 4b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:D6:50:C8:A1:BB:BA:2E:45:4E:3A:43:14:11:7E:57:3D:F1:0A:ED X509v3 Authority Key Identifier: keyid:7D:DD:8D:DC:F1:56:E7:A1:81:A1:B7:39:7B:24:D4:20:96:35:3D:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fd2N3PFW56GBobc5eyTUIJY1Pdg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A55EC/DF65DE92578111ECB6487C54C4F9AE02/fd2N3PFW56GBobc5eyTUIJY1Pdg.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 33:88:c3:45:6e:4a:2c:26:03:3b:40:11:ef:96:b5:92:bd:4f: 71:d3:f0:9f:bd:6e:f6:52:0f:12:de:87:18:ad:9b:00:1b:b9: b7:5c:ff:bf:13:a0:f6:4e:d6:9a:92:4f:46:54:c2:25:87:b9: 48:cf:be:2a:a0:89:17:f6:87:c9:c8:e0:26:52:e4:40:3e:67: c1:85:91:12:7c:bc:17:76:42:0b:93:52:2d:95:45:72:d6:10: 8d:29:ab:42:a9:11:84:ca:51:6c:ea:15:f4:32:8b:76:d5:1c: fc:95:50:98:12:cb:ad:b7:40:81:d6:84:91:9b:4d:9e:d6:12: 18:72:3e:eb:47:ca:c9:b3:ef:81:f4:ee:70:64:b3:6c:ac:56: b1:e3:80:fa:ae:ea:88:a6:a0:91:0e:cf:09:d3:74:b6:da:c2: 61:17:d2:e3:ab:f0:ca:72:2c:ae:96:b0:2d:59:63:06:f1:10: 97:d1:73:b4:20:5a:60:76:46:8a:8b:f3:c0:5d:30:fa:82:ec: 79:0c:2c:dc:6b:84:cb:d0:eb:b5:d6:7c:6b:7d:8a:14:ef:3b: 65:d0:ce:2c:76:ae:af:20:14:fd:5e:86:29:91:da:1f:05:e6: ac:13:a9:a6:d5:b8:dc:8d:39:6d:17:46:5d:00:d5:84:3a:a4: c9:7f:f7:63 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBTIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QTU1RUMxMTAvBgNVBAUTKDdEREQ4RERDRjE1NkU3QTE4MUExQjczOTdCMjRENDIw OTYzNTNERDgwHhcNMjYwNzIzMDAyMzM2WhcNMjYwNzMwMDAyMzM2WjAYMRYwFAYD VQQDEw02YTYxNWYwOC0wZDFmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAla2UNbeEwDoZPEOd7o+7Lkq5cqZlUe5Cc44Ns2AOvXCme8EBnBqCreU0EBzD L8dODTxr9ej1PtWXqjZhNornmMZxqfJibAtmWo7W1UOrFqcRz/+csc/HtZ0uV2rY jXMZdMiLXgAz8+2c8yYaFSOc3N2ueagrWvdSIZ/Uv9sG4WZtLWIUE7melRJYbyJh OTpZE21OJVTofH/yn3EgFJVMgDSJEWGfD3zDtU3rORAQ6/7mFaXLYWuv91E6o7C7 wIvS0HfVsVrwOXPBE3bKpbm4RbvELBSmMazRcixF3C/MX+P4Hu9vkiTfIwpxegw/ jPRWsGKZzJ7tSxjN0Rk7I2NLwwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJjWUMih u7ouRU46QxQRflc98QrtMB8GA1UdIwQYMBaAFH3djdzxVuehgaG3OXsk1CCWNT3Y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNTVFQy9ERjY1REU5MjU3 ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2R0JvYmM1ZXlUVUlKWTFQ ZGcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2ZkMk4zUEZXNTZHQm9iYzVleVRVSUpZMVBkZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB NTVFQy9ERjY1REU5MjU3ODExMUVDQjY0ODdDNTRDNEY5QUUwMi9mZDJOM1BGVzU2 R0JvYmM1ZXlUVUlKWTFQZGcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAM4jDRW5KLCYDO0AR75a1kr1PcdPwn71u9lIPEt6HGK2bABu5t1z/vxOg9k7W mpJPRlTCJYe5SM++KqCJF/aHycjgJlLkQD5nwYWREny8F3ZCC5NSLZVFctYQjSmr QqkRhMpRbOoV9DKLdtUc/JVQmBLLrbdAgdaEkZtNntYSGHI+60fKybPvgfTucGSz bKxWseOA+q7qiKagkQ7PCdN0ttrCYRfS46vwynIsrpawLVljBvEQl9FztCBaYHZG iovzwF0w+oLseQws3GuEy9DrtdZ8a32KFO87ZdDOLHauryAU/V6GKZHaHwXmrBOp ptW43I05bRdGXQDVhDqkyX/3Yw== -----END CERTIFICATE-----Generated at Fri Jul 24 18:02:07 2026 by rpki-client